Slashdot Mirror


China Passes Law Requiring Tech Firms To Hand Over Encryption Keys (betanews.com)

Mark Wilson writes: Apple may have said that it opposes the idea of weakening encryption and providing governments with backdoors into products, but things are rather different in China. The Chinese parliament has just passed a law that requires technology companies to comply with government requests for information, including handing over encryption keys.

Under the guise of counter-terrorism, the controversial law is the Chinese government's attempt to curtail the activities of militants and political activists. China already faces criticism from around the world not only for the infamous Great Firewall of China, but also the blatant online surveillance and censorship that takes place. This latest move is one that will be view very suspiciously by foreign companies operating within China, or looking to do so.

28 of 170 comments (clear)

  1. whatever China wants by turkeydance · · Score: 2

    China gets.

    1. Re:whatever China wants by khasim · · Score: 4, Insightful

      So tech companies will have at least 2 product lines.

      a. for everywhere EXCEPT China
      b. for no place BUT China

      What will happen to this law once Chinese tech is not accepted anywhere except inside China?

      And how many Chinese companies will be able to produce anything from category "a"? Remember, there is a LOT of tech that is manufactured in China but still belongs to non-Chinese corporations.

    2. Re:whatever China wants by rtb61 · · Score: 2

      To say it is China 'only', is really inaccurate, there are a whole bunch of countries with similarly repressive regimes. You can understand their need to do so though. You have hundreds of millions working in poverty, working extremely hard, for bloody little recompense, this cheered on by western corporations (the idiots are cheering their own demise, fools) and keeping a lid on that social injustice takes real effort but that lid is loosening all of the time and they simultaneously seem to be easing off whilst applying more controls. Other regimes around the place are just down right evil or just becoming that way (lipstick on a very greedy pig, looks at us).

      What it means is rapidly rotating encryption keys and different keys for different users (1 per, have fun untangling that mess) and user to user encryption keys, completely separate from user to server encryption keys. You can not give them a copy of what you do not have.

      --
      Chaos - everything, everywhere, everywhen
    3. Re:whatever China wants by ShanghaiBill · · Score: 2

      They can just slap the suspects in jail and start applying electro-shock therapy until they spit out the passwords they require.

      That doesn't work when you have 1.3 billion suspects. This is not about investigating a few specific individuals, but about mass surveillance of the entire population.

    4. Re:whatever China wants by ShanghaiBill · · Score: 2

      China has to oppress/spy very hard to prevent the poor working class from starting a communist revolution, eh?

      Actually, yes. There are a surprising number of "reactionary" communists in China, that want to go back to Maoism, despite the disastrous outcome of his policies. It is fairly common to see people with little Mao pins on their lapels, especially in inland areas, and some Hunan restaurants have little "Mao shrines" (Mao was from Hunan).

    5. Re:whatever China wants by drinkypoo · · Score: 2

      I see you completely missed the bit where the Government of China switched from communism to fascism without changing the name (left wing, right wing, reach around far enough and they touch).

      Was China ever really communist? The guys at the top have always had it much, much better than everyone else. I doubt perfect Communism is even possible without a computer running the show, but they didn't even come close.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  2. It's kinda horrifying by Anonymous Coward · · Score: 2, Insightful

    It's kinda horrifying that we are so close to chinese draconian laws or even further advanced that we can't even complain about them. This is about to be implemented in the U.S. and in U.K. you get to stay in jail until you reveal your password.

    1. Re: It's kinda horrifying by Noah+Haders · · Score: 2

      Weve definitely lost the moral high ground.

  3. China by liqu1d · · Score: 5, Insightful

    Please stop being the UK govs role model...

  4. This might be good for the USA by giltwist · · Score: 5, Funny

    Just like the USA distanced itself from eugenics (such as the mandatory sterilization of people with mental disabilities) when it got popular with the Nazis, maybe China demanding encryption keys will get some American politicians to back off of the idea.

    1. Re:This might be good for the USA by Anonymous Coward · · Score: 5, Insightful

      Too late, they already passed CISA. America has already demanded the encryption keys as "information sharing."

    2. Re:This might be good for the USA by 93+Escort+Wagon · · Score: 5, Insightful

      Politicians in the U.S. and Europe will have no difficulty in, on the one hand, decrying this as an oppressive move by a non-democratic government while simultaneously, on the other hand, continuing to demand that THEY need exactly the same thing in order to combat terrorism.

      --
      #DeleteChrome
    3. Re:This might be good for the USA by arth1 · · Score: 4, Insightful

      Most Americans are against warrantless surveillance on both sides of the political spectrum.

      Most Americans have no idea what encryption or data surveillance entails, and are more concerned with the price of TV dinners at Wal-Mart.

  5. Democrats by AndyKron · · Score: 2, Insightful

    Don't the Democrats want basically the same thing?

    1. Re:Democrats by penguinoid · · Score: 2

      Both the Democans and Republicrats want to kill encryption, albeit for different ultimate purposes. (Amusingly, both you and AC just below had the same thought simultaneously.)

      --
      Don't waste your vote! Vote for whoever you want, unless you live in a swing state it won't matter anyways
    2. Re:Democrats by cavreader · · Score: 2

      China can make a law such as this because they do not have to worry about any domestic protests or complaints. They do not have an adversarial forum to debate new laws. The only discussion in amongst the top Party leaders behind closed doors.

    3. Re:Democrats by penguinoid · · Score: 3, Funny

      The Democrats want to spy on us to get more power, without losing too many votes from Democrat voters.
      The Republicans want to spy on us to get more power, without losing too many votes from Republican voters.
      Thus, the justification for the spying is different because it has to appeal to different demographics.

      --
      Don't waste your vote! Vote for whoever you want, unless you live in a swing state it won't matter anyways
    4. Re:Democrats by Darinbob · · Score: 2

      Most of the politicians do. They don't understand the math, or the economics, or any other of the concepts. What they do know is that they have to respond to accusations that they're being weak on fighting terrorists. There's no left or right ideology here other than to look like you're being useful to the voters.

      Law enforcement if left unchecked will assume more and more power, and the government is being lax in its duties by not saying "no" to those grabbing hands more often. If their only goal is to stop all crime then the logical end result is to remove all freedoms from all citizens; prevent crime by incarcerating or separating everyone. The rule in law enforcement is to assume guilt until innocence is proven, and if innocence is proven then submit a press release that objects vigorously to letting the suspect go. And so they are lobbying the politicians trying to get their way, "it's easy" they say, "just let us have a back door!"

  6. Re:Damn! They beat us to the punch! by penguinoid · · Score: 5, Funny

    Wait, if the Chinese are doing it, doesn't that mean that it's an evil commie tactic that no God-fearing American would ever even suggest using?

    --
    Don't waste your vote! Vote for whoever you want, unless you live in a swing state it won't matter anyways
  7. How interested is Apple in selling stuff in China? by QuietLagoon · · Score: 5, Insightful
    The answer to that question is the answer to the larger issue here.

    .
    If Apple wants to continue selling devices in China (which is a needed market for Apple, as the US market is becoming saturated), then Apple will comply with the laws of China.

    It's as simple as that.

  8. Easy solution by Dishwasha · · Score: 2

    Give Chinese consumers crippleware products so no company cares enough to protect its Chinese sold IP.

  9. Yet another reason by swillden · · Score: 2

    Yet another reason for companies to make sure they don't have the keys to their users' data. You can't provide what you provably never had.

    Of course, if governments require vendors to escrow the keys that strategy won't work. But it doesn't appear that China has gone that far.

    --
    Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
  10. Re:Apple should leave China by Anonymous Coward · · Score: 2, Interesting

    That is a fucking atrocious idea. Giving into China here nullifies their "we don't play that" stance. Uncle Sam will know that they DO play that way; if you threaten Apple's profits. Once that door is open Uncle Sam will get what he wants.

    This isn't a vague slippery slope fallacy either. This is a direct consequence.

  11. Clinton does, Sanders doesn't by Anonymous Coward · · Score: 2, Informative

    Sanders voted against CISA while Clinton wants a "Manhattan Project" where Google, Apple, and MS give the government your keys "voluntarily".

  12. Re:How interested is Apple in selling stuff in Chi by StormReaver · · Score: 2

    If Apple wants to continue selling devices in China (which is a needed market for Apple, as the US market is becoming saturated), then Apple will comply with the laws of China.

    Which is why it is better for all tech firms to not have access to encryption keys. End to end encryption needs to be the standard, so there are no keys to turn over.

  13. View of the law via Chinese press by QuietLagoon · · Score: 2
    China adopts first counter-terrorism law in history

    ...The law establishes basic principles for counter-terrorism work and strengthens measures of prevention, handling, punishment as well as international cooperation, he said.

    Under the new bill, telecom operators and internet service providers are required to provide technical support and assistance, including decryption, to police and national security authorities in prevention and investigation of terrorist activities.

    They should also prevent dissemination of information on terrorism and extremism.

    Li Shouwei of the National People's Congress (NPC) Standing Committee legislative affairs commission, said the rule accorded with the actual work needed to fight terrorism and was basically the same as other major countries.

    "The clause reflects lessons China has learned from other countries and is a result of wide solicitation of public opinion," he added.

    "(It) will not affect companies' normal business nor install backdoors to infringe intellectual property rights, or ... citizens freedom of speech on the internet and their religious freedom," Li said.

    China's national security law adopted in July also requires Internet and information technology, infrastructure, information systems and data in key sectors to be "secure and controllable"....

  14. Apple should NOT leave China by TiggertheMad · · Score: 4, Insightful

    Apple should comply with this request, it is actually a very good thing for the US (and terrible for china). By creating this backdoor, China is painting a huge target on the server(s) that store these 'master keys'. Every foreign intelligence agency in the world will want in and they will get in. Someone will forget to check a password buffer when coding it, or someone with an admin password will be presented with embarrassing pictures, and then wham! every western Intel agency will have access to the phone data for all the important people in China. This data will need to be used by so many people that it should be trivial to compromise someone with a master key.

    Apple will then be complying with China's laws, and can keep raking in the bucks by selling them easy to compromise phones and personal gadgetry. Nothing requires them to then cripple their phones in other parts of the world, which they will presumably not do so they can claim that they have a secure platform as a sales point every else. Win Win.

    Of course, the person getting fucked is the average Chinese person. They are being ass-reamed even harder by the government stooges, but perhaps this will be the thing that finally pisses the populace off enough to finally rise up and start hanging all the communist stooges running the country.

    I bet the NSA is having a massive Christmas circle jerk over this one. Their job just became a million times easier...

    --

    HA! I just wasted some of your bandwidth with a frivolous sig!
  15. Re:How interested is Apple in selling stuff in Chi by penguinoid · · Score: 3, Insightful

    It's quite interesting actually because now we get to see what sort of price Apple places upon its principles and core values.

    An Apple's core is the part you throw out.

    --
    Don't waste your vote! Vote for whoever you want, unless you live in a swing state it won't matter anyways